Careers

INFORMATION SYSTEM SECURITY OFFICER (ISSO)

This position requires all candidates to possess an active CISSP certification.

Duties:

The ISSO shall serve as principal staff advisor to the SO for applicable networks on all matters involving the security of the information systems. The ISSO’s other duties include (but are not limited to):

– Implement and manage FISMA compliance of systems’ information and IT security controls of systems by serving as the Information System Security Officer (ISSO)

• For systems assigned, implement FISMA compliance and NESDIS ACIO-S fiscal year IT priorities to maintain the system Authorization to Operate (ATO) including implementing the following in accordance with DOC, NOAA, and NESDIS policy:

· Plans of Action and Milestones (POA&Ms); authorization documentation and related artifacts; and implementing and monitoring system security controls.

· Ensure 100% of assigned FISMA systems in operation maintain a full ATO by managing A&A Project Plans, managing POA&Ms, performing and documenting required continuous monitoring and configuration management activities, implementing and continuously monitoring effectiveness of information and IT security controls including Balanced Scorecard Top 5 controls (CM2, CM6, CM8, CM9, SI2, and RA5) in accordance with established DOC, NOAA, and NESDISIT policies, priorities, targets, and directives.

· Ensure 100% on-time submission of FISMA quarterly status and ad hoc progress reports.

· Control and manage changes to the information system and document required

· Submit Assessment and Authorization (A&A) documentation to ACIO-S 100% on time in accordance with the established NESDIS IMS, the system’s A&A

· Project Plan, and the finalized Security Control Assessment (SCA) Security Assessment Plan schedules.

· Manage IT security activities following an approved A&A Project Plan consistent with key milestones in the NESDIS Integrated Master Schedule (IMS).

· Other duties as assigned.
Candidate should possess a minimum of 5 years of directly related experience.